Showing posts with label iss. Show all posts
Showing posts with label iss. Show all posts

Monday, February 20, 2012

ISS Scan Vulnerabilities

I want to remove vulnerabilities that show up after doing an ISS scan on my
SQL Server box. When one loads SQL a user is created tht has Act as System
Privilege, Replace Process Token Privilege, and also Lock Memory Privilege.
I realize the user in this case is not a ordinary user, but I must argue tha
t I need to keep this user in the system even though it does appear on our r
eport as a vulnearabililty. Or I can get rid of this user if I do not need
him, maybe it purpose was
just for the installation of SQL. I am a beginner, and know little about S
QL.
Does anyone know the impact or reason SQL creates this user, and how I shoul
d respond to the request to remove this user because its a security threat.
Thanks in advance for any words of wisdom.These permissions are granted via Enterprise Manager.
283811 HOW TO: Change the SQL Server or SQL Server Agent Service Account
http://support.microsoft.com/?id=283811
For Best Practices see the following technet article.
http://www.microsoft.com/technet/tr...chnet/prodtechn
ol/sql/maintain/security/sp3sec/default.asp
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.

ISS & apache

Hi
I have 2 real IP's - Please let me know is it possible to configure IIS &
APACHE on port 80 on these 2 IP's (i.e one IP running IIS on port 80 and the
other IP running APACHE on port 80.
thanks in advance
MenonProbably, I can't remember enough about IIS but it certainly sounds
possible. This however is a SQL Server newsgroup so you will no doubt get a
quicker answer in a group like microsoft.public.inetserver.iis
--
HTH
Jasper Smith (SQL Server MVP)
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Murali Krishnan" <menon@.nagpur.dot.net.in> wrote in message
news:%23x3VXvMgDHA.1872@.TK2MSFTNGP09.phx.gbl...
Hi
I have 2 real IP's - Please let me know is it possible to configure IIS &
APACHE on port 80 on these 2 IP's (i.e one IP running IIS on port 80 and the
other IP running APACHE on port 80.
thanks in advance
Menon